2022

The simplepush server iterates through the application installations and pushes a notification to the server provided by

Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir(

An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error o

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

In JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of untrusted services

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.19.

NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11.

The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA i

Cross Site Scripting (XSS) vulnerability in router Asus DSL-N14U-B1 1.1.2.3_805 via the "*list" parameters (e.g. filter_

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access

Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use (TOCTOU) race-condition attack d

SQL Injection vulnerability in viaviwebtech Android EBook App (Books App, PDF, ePub, Online Book Reading, Download Books

A stack overflow in the function DM_ In fillobjbystr() of TP-Link Archer C50&A5(US)_V5_200407 allows attackers to cause

ESPCMS P8 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the fetch_filename fu

An issue in the AST parser (ast/compile.go) of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service (

opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby. In versions prior to 2.0.1 the ruby `YAML

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.

Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Aweso

It was reported that watchman in openshift node-utils creates /var/run/watchman.pid and /var/log/watchman.ouput with wor

PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensit

PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions

PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security

PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution. An attacker c

PingID Windows Login prior to 2.8 is vulnerable to a denial of service condition on local machines when combined with us

A misconfiguration of RSA in PingID Mac Login prior to 1.1 is vulnerable to pre-computed dictionary attacks, leading to

Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.

Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.

Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.

Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.

Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.

Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.

Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.

Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.

A command execution vulnerability exists in the clish art2 functionality of Robustel R1510 3.3.0. A specially-crafted ne

By using a specific credential string, an attacker with network access to the device’s web interface could circumvent th

A data removal vulnerability exists in the web_server /action/remove/ API functionality of Robustel R1510 3.3.0. A speci

In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to

Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP end

A cross-site request forgery (CSRF) vulnerability in Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier allows atta

Jenkins HPE Network Virtualization Plugin 1.0 stores passwords unencrypted in its global configuration file on the Jenki

A cross-site request forgery (CSRF) vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows at

Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier does not correctly perform a permission check in an HTTP endpo

A missing permission check in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers with Overall/

A cross-site request forgery (CSRF) vulnerability in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows

A missing permission check in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers with Overall/

A missing check in Jenkins RQM Plugin 2.8 and earlier allows attackers with Overall/Read permission to enumerate credent

Jenkins RQM Plugin 2.8 and earlier stores a password unencrypted in its global configuration file on the Jenkins control

Jenkins Cisco Spark Plugin 1.1.1 and earlier stores bearer tokens unencrypted in its global configuration file on the Je

Jenkins Elasticsearch Query Plugin 1.2 and earlier stores a password unencrypted in its global configuration file on the

Jenkins Jigomerge Plugin 0.9 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller